Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/Ec37hVP71V_ZFevZQkk3KHhvyto.roa
File: Ec37hVP71V_ZFevZQkk3KHhvyto.roa (raw, json)
Hash identifier: xJvGeA8vYMl7ZkUXDTWZEhOILjaO4eEHTDCf3ASOoaQ=
Subject key identifier: 11:CD:FB:85:53:FB:D5:5F:D9:15:EB:D9:42:49:37:28:78:6F:CA:DA
Certificate issuer: /CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Certificate serial: 018CC94E455A48BC0CB98C1EFA0F49ACD315
Authority key identifier: B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/Ec37hVP71V_ZFevZQkk3KHhvyto.roa
Signing time: Tue 02 Jan 2024 08:33:19 +0000
ROA not before: Tue 02 Jan 2024 08:33:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6766
IP address blocks: 2001:67c:2ed8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:45:5a:48:bc:0c:b9:8c:1e:fa:0f:49:ac:d3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Validity
Not Before: Jan 2 08:33:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11cdfb8553fbd55fd915ebd942493728786fcada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:17:06:e7:d5:12:ba:e9:ea:35:e6:77:0f:
4c:e2:6e:02:f9:2c:b1:25:85:30:61:e2:89:4e:6b:
ed:c2:58:83:b1:e3:aa:d5:a8:32:c0:ed:5d:42:3a:
dc:7d:37:a4:79:f7:dc:de:96:3b:6b:5f:c6:68:42:
82:10:1f:df:23:36:00:63:86:8d:ab:3f:3e:60:6b:
c6:ef:e9:41:9f:2c:4e:24:23:41:98:e5:7b:27:a5:
ee:80:dd:ae:66:9f:d0:9a:dd:e7:34:35:bf:2e:ac:
b5:1f:0a:10:a9:03:19:e8:d3:74:c1:90:ab:2a:9f:
9e:d5:0c:fd:4d:3c:dd:a2:bd:90:3f:5d:87:06:c5:
46:a8:e0:78:9b:de:71:e7:55:06:26:48:6c:8b:8d:
81:04:95:25:7c:fc:cb:2c:43:1e:af:94:9a:e5:81:
a6:0f:8a:c4:51:25:a4:3e:24:9a:92:6e:9b:86:84:
42:b4:f0:1c:21:49:f2:5c:b8:58:52:14:4e:b5:d5:
b1:7d:cb:38:5a:a1:6f:2d:2f:dd:b4:73:f8:35:52:
98:f6:b0:0b:47:b1:b2:6e:62:93:d8:d5:29:17:5c:
a9:7f:f4:83:9c:ab:56:7f:ce:60:e8:d3:59:84:26:
87:2a:ff:3a:a6:d0:1d:95:2d:80:c3:0f:05:8a:ba:
5a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CD:FB:85:53:FB:D5:5F:D9:15:EB:D9:42:49:37:28:78:6F:CA:DA
X509v3 Authority Key Identifier:
keyid:B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/Ec37hVP71V_ZFevZQkk3KHhvyto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ed8::/48
Signature Algorithm: sha256WithRSAEncryption
1e:3a:89:2d:ba:74:f1:7b:5f:fb:bb:78:01:49:a5:2b:e3:2e:
cc:b7:08:70:1a:ca:5e:bc:03:34:ef:23:05:22:8e:25:09:ca:
41:5c:14:04:d1:ec:fe:5b:19:99:d8:ac:a2:73:ee:bd:eb:ae:
ea:5c:b0:11:1a:e5:a5:78:82:cb:01:ac:d0:37:ab:b7:96:3a:
06:0d:04:97:76:7d:e1:fd:cf:ec:be:a6:d5:fb:53:c4:90:67:
82:73:13:d5:62:67:0e:5a:f4:5f:7c:40:d5:b5:5a:e7:c3:16:
1d:4c:67:86:f9:e0:75:0a:4f:d7:3a:27:13:1d:2f:29:75:50:
7f:82:7a:da:77:c3:85:fa:fe:c4:7d:1a:a2:aa:b7:63:26:df:
98:00:5a:27:ed:35:6a:92:e9:78:7d:b8:05:0a:47:5b:0c:4f:
95:38:1d:93:c9:e9:b2:08:a6:e6:d3:bb:e8:c0:8e:a1:6b:44:
3e:79:61:77:85:bd:6e:51:65:9a:a9:47:38:5e:44:c2:83:8f:
57:8b:df:2c:ec:a5:4f:16:95:5a:e5:77:56:03:3f:e5:b3:9a:
63:e3:6b:ca:84:45:69:77:59:97:ab:04:dd:2e:4f:fc:11:7b:
a4:9e:e7:53:58:fa:eb:37:75:5b:f7:2d:86:11:f1:7b:b2:eb:
9a:5c:29:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:12:33 2024 by rpki-client on console-fra.rpki-client.org